 |
| Members of Creditlock.com enjoy free access to Credit Lock Down Pro. To access service, Click This Box |
|
|
Identity Theft Future Threat: Mosaic Phishing June 18, 2007
|
|
Identity Theft is often committed through traditional methods such as wallet stealing and dumpster diving. Consumers are also rightfully concerned about cyber-space threats such as Phishing. Identity Thieves "Phish" by soliciting sensitive information through emails or websites fraudulently pretending to represent reputable institutions. Many consumers have become aware of Phishing threats, and have learned not to divulge sensitive personal information through such channels. However, many consumers continue to divulge information they deem "safe", or "insufficient" to possibly constitute a security threat. For example, a consumer may not be concerned about providing last 4 digits of a social security number, or other single items such as email address, mailing address, date of birth, or other. What many such consumers don't realize is that such "insufficient" information could possibly expose them to "Mosaic" Phishing.
A Mosaic is a picture created by assembling tiny fragments. A magnified close-up of a Mosaic is often un-interesting, as such close-up will consist of a single fragment or part of a fragment. Such fragment on its own is basically meaningless, and often has little or no value (unless such fragment is made of a precious or semi-precious material). However, when a mosaic is examined from a distance, the tiny fragments come together to reveal an elaborate design or picture. Such picture is often valuable, due to the precise and time consuming effort it takes to assemble hundreds and thousands of fragments into a cohesive design or picture. |
|
 |
Similarly, a single data, or fragment of a data, may seem unimportant, and unlikely to represent a security threat. However, such data can often represent a substantial security threat, if it is assembled with other tiny data to reveal an overall picture, or identity of an individual. The usage of Malware in various Phishing scams make such "Mosaic" Phishing a serious threat to consumers.
A Phishing communication can solicit an email address from a consumer, without asking for any other information. Another Phishing communication can solicit a city of residence, and no other information. A Malware program, hidden on a consumer's computer can theoretically coordinate such individual Phishing communications, and can possibly trace individual unimportant responses to a single user. Once such individual responses, or data fragments, are traced to an individual consumer, they can be assembled into a profile that characterizes the identity of such user.
When consumers examine all the various information they provide in cyber-space on a collective basis, they may be amazed at the profile they have provided about their identity. For example, a single consumer has probably provided his name, address, credit card number, expiration date, date of birth, name of first pet, name of first school, mother's maiden name, favorite hobby, income, employer, job, favorite sport, etc... Many consumers often have no reservation about responding to so called: "security" questions; those questions you are asked to respond to in order to help you replace your username or password in case you forget them. How secure is it for consumers to answer such "security" questions? Why is it that such "security" questions continue to change, and ask about other aspects of our lives?
The risk of "Mosaic" Phishing should cause consumers to be hesitant about providing any single piece of information, no matter how unimportant it may seem, to an unknown third party. As a matter of a fact, consumers should also be concerned about all those "security" questions and answers they provide to various known and unknown service providers. As cyber-crime evolves, criminals would be expected to resort to sophisticated Malware programming, and various "Mosaic" schemes, in order to dupe consumers into freely providing personal data or fragments of data. |
|
To Go Back to Blog, Make Comments or RSS Feeds Click Here |
|